CVE-2026-112373

CVSS 6.5 (medium) · published 2026-10-20

A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

Weakness: CWE-119, CWE-121

Source: NVD CVE-2026-112373

References

• https://github.com/XxingGoD/H3C-NX15-R017-Vulns/tree/main/H3C/NX15R017/usrlist_stack_overflow_dos
• https://vuldb.com/cve/CVE-2026-112373
• https://vuldb.com/submit/983540
• https://vuldb.com/vuln/422421
• https://vuldb.com/vuln/422421/cti

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.